Office 365 , OKTA and ActiveSync Skip to main content
https://support.okta.com/help/answers?id=906f0000000qtf5iak&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
svc sailpointsvc sailpoint 

Office 365 , OKTA and ActiveSync

We have configured OKTA with Office 365. Everything works with MFA but ActiveSync.

How can we allow ActiveSync traffic ? We need to MFA all external access to Office 365 except Exchange ActiveSync

Can OKTA do ADFS Claims like MS: https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx ?


 
Best Answer chosen by svc sailpoint
Eric KarlinskyEric Karlinsky (Okta, Inc.)
Hey Edvin,

Okta does have the ability to exempt ActiveSync clients from MFA, but it's not on by default. You have to ask support to enable this feature for you.

Note that this is not on by default because this provides an avenue to circumvent MFA. Some desktop mail clients (like Apple Mail) leverage ActiveSync as well, so it's not just mobile clients. 

If you understand the risk, please ask support to enable this functionality for your Okta org.

Thanks,
Eric Karlinsky
Technical Marketing @ Okta

All Answers

Eric KarlinskyEric Karlinsky (Okta, Inc.)
Hey Edvin,

Okta does have the ability to exempt ActiveSync clients from MFA, but it's not on by default. You have to ask support to enable this feature for you.

Note that this is not on by default because this provides an avenue to circumvent MFA. Some desktop mail clients (like Apple Mail) leverage ActiveSync as well, so it's not just mobile clients. 

If you understand the risk, please ask support to enable this functionality for your Okta org.

Thanks,
Eric Karlinsky
Technical Marketing @ Okta
This was selected as the best answer
svc sailpointsvc sailpoint
Great. Thanks Eric. Have been on with OKTA support for couple days now. Will refer them to your explanation.
Sam YatesSam Yates
Eric, is this a GA feature?  I thought I asked about this a while back and was told it was "in progress".